Malware.AI.1494483780 (file analysis)

The Malware.AI.1494483780 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.1494483780 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the EnigmaStub malware family
Binary compilation timestomping detected

How to determine Malware.AI.1494483780?


File Info:
name: A7AC2BA3EE2655CF57BE.mlw
path: /opt/CAPEv2/storage/binaries/e8571f09ee7a8cd5ba79256e6a8ae4c51c9605719b5b777ac125b76492dda5ec
crc32: 83372E4C
md5: a7ac2ba3ee2655cf57be468291b2a292
sha1: b3630a40c21bb9ecbc8f66e4d71aed87cae1aeec
sha256: e8571f09ee7a8cd5ba79256e6a8ae4c51c9605719b5b777ac125b76492dda5ec
sha512: 9403636fee3b8f182dadb73d35f10bd91c2b31af00176e790ea926ed6645881f547ec35d3e6982f760d4622ec54283d9a1557b952fbb73df9b0a4d86d893c60c
ssdeep: 6144:i/a5ngPyPg8v+TgOxRaxHUTUgjkVM3ySQb46hmcSOLdCLp2HUYBDTaXL8pA+IY3:i/gKyPg854TJkVhpb46hnSMfDnaIpA+9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BBE4E71813272005D02959FE086DE1B9CA146E9BDB35034773E1FE6BBCBA5ADCF251E2
sha3_384: ec5789fce5c31cc8ae00a5024988dd904fd531ca759b5711b5d2b1182d7ceabefc315ce449b1fcfe3e4405e880916415
ep_bytes: ff250020400000000000000000000000
timestamp: 2049-06-07 08:48:45

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: MaxCare_RickyWind
FileVersion: 3.0.0.0
InternalName: MaxCare_RickyWind.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: MaxCare_RickyWind.exe
ProductName: MaxCare_RickyWind
ProductVersion: 3.0.0.0
Assembly Version: 3.0.0.0

Malware.AI.1494483780 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38250653
FireEye	Generic.mg.a7ac2ba3ee2655cf
McAfee	Artemis!A7AC2BA3EE26
Cylance	Unsafe
Arcabit	Trojan.Generic.D247A89D
BitDefenderTheta	Gen:NN.ZemsilF.34084.Qm0@a4KWxGh
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0WLE21
Kaspersky	UDS:Trojan.Multi.GenericML.xnet
BitDefender	Trojan.GenericKD.38250653
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Trojan.GenericKD.38250653
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/ATRAPS.Gen
TrendMicro	TROJ_GEN.R002C0WLE21
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.38250653 (B)
Ikarus	Trojan.Agent
Avira	TR/ATRAPS.Gen
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.GenericKD.38250653
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.C4101809
ALYac	Trojan.GenericKD.38250653
MAX	malware (ai score=81)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.1494483780
APEX	Malicious
SentinelOne	Static AI – Malicious PE
Fortinet	Malicious_Behavior.SB
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Malware.AI.1494483780?

Malware.AI.1494483780 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X